Ethical Hacking Scope, Methodologies, and Frameworks EHE Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security team is planning a red team exercise. They want to use a framework that helps them emulate a specific threat actor's behavior. The team also needs to ensure that the exercise stays within legal boundaries. Which combination of actions is most appropriate?

   • AUse OWASP Testing Guide to model the threat actor and rely on verbal approval.
   • BUse OSSTMM to model the threat actor and include a disclaimer in the report.
   • CUse MITRE ATT&CK to model the threat actor and obtain written authorization from the client.
   • DUse PTES to model the threat actor and assume the client's approval is implicit.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security consultant is advising a client on how to structure their penetration testing program. The client wants to ensure that testing is aligned with business objectives and that the results are actionable. The consultant recommends using a framework that integrates with the organization's risk management processes. Which framework is most appropriate for this recommendation?

   • ACIS Controls
   • BOWASP Testing Guide
   • CNIST Cybersecurity Framework
   • DPTES
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An ethical hacker is performing a vulnerability assessment for a client. During the assessment, the hacker discovers that the client's wireless network is using WEP encryption, which is known to be weak. The client's contract only authorizes passive testing, not active exploitation. What should the hacker do?

   • AAsk the client for permission to crack the WEP key on the spot.
   • BAttempt to crack the WEP key to demonstrate the risk.
   • CDocument the WEP usage as a finding and recommend upgrading to WPA3.
   • DIgnore the WEP issue because it is not part of the assessment scope.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security consultant is asked to develop a penetration testing methodology for a client that operates in a highly regulated industry. The methodology must be repeatable, include clear phases, and align with industry standards. The client also requires that the methodology be flexible enough to accommodate different types of tests. Which approach is the most appropriate?

   • AUse MITRE ATT&CK as the primary methodology because it is comprehensive.
   • BUse OWASP Testing Guide for all tests because it is widely recognized.
   • CCreate a new methodology from scratch without referencing existing frameworks.
   • DAdopt PTES as the base methodology and customize it for the client's needs.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security team is planning a penetration test for a critical infrastructure organization. The organization has strict uptime requirements and cannot afford any downtime. The team must choose a testing methodology that minimizes the risk of disruption while still providing meaningful results. Which approach is most appropriate?

   • AUse a framework that includes a pre-engagement phase to define acceptable risk and testing windows.
   • BPerform passive reconnaissance and vulnerability scanning only, avoiding any active exploitation.
   • CConduct a full active exploitation test during business hours to identify all vulnerabilities.
   • DSkip testing altogether because the risk of downtime is too high.
   Reveal Solution Discussion Select an answer first